chore(ci): declare least-privilege permissions on the desktop e2e wor… #26334

Job	Run time
Build AMD64 (./docker/realtime.Dockerfile, ghcr.io/simstudioai/realtime, ECR_REALTIME, ubuntu-lat...	33s
Build AMD64 (./docker/pii.Dockerfile, ghcr.io/simstudioai/pii, ECR_PII, ubuntu-latest, blacksmith...	28s
Build AMD64 (./docker/db.Dockerfile, ghcr.io/simstudioai/migrations, ECR_MIGRATIONS, ubuntu-lates...	1m 13s
Detect Version	5s
Build AMD64 (./docker/cron.Dockerfile, ghcr.io/simstudioai/cron, ubuntu-latest, blacksmith-2vcpu-...	19s
Detect Desktop Changes	14s
Build AMD64 (./docker/app.Dockerfile, ghcr.io/simstudioai/simstudio, ECR_APP, linux-x64-8-core, b...	8m 31s
Test and Build / Lint and Test	4m 9s
Test and Build / Build App	3m 7s
Build ARM64 (GHCR Only)	0s
Migrate Dev DB	0s
Check Docs Changes	0s
Deploy Trigger.dev (Dev)	0s
Build Dev ECR	-1s
Check Desktop Signing Secrets	0s
Create Desktop Prerelease	0s
Desktop Prerelease Build	0s
Publish Desktop Prerelease	0s
Prune Desktop Prereleases	-1s
Migrate DB / Apply Database Migrations	39s
Promote Images	16s
Process Docs	-1s
Create GHCR Manifests	-1s
Create GitHub Release	-1s
Desktop Release	0s
	19m 29s

Navigation Menu